CVE-2025-26791

MEDIUM Year: 2025
CVSS v3 Score
4.5
Medium
Weakness Type
CWE-79
View all →

Vulnerability Description

DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).

Related Vulnerabilities

CVE-2023-1316

MEDIUM
CVSS:4.5(Medium)

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CWE-792023